@flotic/minitok@1.4.9: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@flotic/minitok@1.4.9: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged · loading source

README.mdView file

•Run `npm run readiness:all` for all three deterministic, local-only customer-facing checks. The authoritative generated VSIX is `extension/artifacts/minitok-extension-<extension-version>.vsix`; stale or unrelated VSIX candidates remain diagnostic only and are never deleted. `npm run readiness:checks` remains an alias. Use `node scripts/readiness-checks.mjs --target extension|cli|mcp --json` to run one surface. Stage 3 checks include versioned VSIX presence and manifest consistency, npm dry-run runtime files, bin and Node engine metadata, CLI help and non-TTY behavior, the packaged MCP stdio entrypoint and token-file session binding, plus localhost HTTP authentication, per-session isolation, and authenticated non-secret `/metrics` monitoring. `PASS` means local evidence was found, `BLOCKED`

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

src/cli/commands/auth.jsView file

108patternName = generic_password severity = medium line = 108

Medium

Secret Pattern

Package contains a possible secret pattern.

src/cli/commands/auth.jsView on unpkg · L108

src/llm/provider.jsView file

5L6: const dns = require("dns").promises; L7: const net = require("net"); ... L25: try { L26: const text = await res.text(); L27: if (!text) return ""; ... L139: pinned.hostname = address.includes(":") ? `[${address}]` : address; L140: return { dispatcher: require("undici").ProxyAgent ? new (require("undici").ProxyAgent)({ uri: process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || proces... L141: } ... L399: const headers = this._requestHeaders(auth, apiKey, { "x-api-key": apiKey, "anthropic-version": "2023-06-01" }); L400: const res = await fetchWithTimeout(`${endpointTransport.url}/v1/messages`, { method: "POST", headers, body: JSON.stringify(body), signal: options.signal, timeout_ms: options.timeou... L401: if (!res.ok) throw providerError("Anthropic", res.

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/llm/provider.jsView on unpkg · L5

src/auth/oauth.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @flotic/minitok@1.4.0 matchedIdentity = npm:QGZsb3RpYy9taW5pdG9r:1.4.0 similarity = 0.728 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/auth/oauth.jsView on unpkg

Source & flagged code

4 flagged

README.mdView file

•Run `npm run readiness:all` for all three deterministic, local-only customer-facing checks. The authoritative generated VSIX is `extension/artifacts/minitok-extension-<extension-version>.vsix`; stale or unrelated VSIX candidates remain diagnostic only and are never deleted. `npm run readiness:checks` remains an alias. Use `node scripts/readiness-checks.mjs --target extension|cli|mcp --json` to run one surface. Stage 3 checks include versioned VSIX presence and manifest consistency, npm dry-run runtime files, bin and Node engine metadata, CLI help and non-TTY behavior, the packaged MCP stdio entrypoint and token-file session binding, plus localhost HTTP authentication, per-session isolation, and authenticated non-secret `/metrics` monitoring. `PASS` means local evidence was found, `BLOCKED`

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

src/cli/commands/auth.jsView file

Lines 88-121javascript

88async function customerLogout(server) {

89 const session = loadCustomerSession();

90 let remoteRevoked = false;

91 if (session?.refresh_token) {

92 try {

93 const result = await postJson(resolveServerUrl({ cliServer: server }) + "/v1/auth/logout", { refresh_token: session.refresh_token }, 10000);

94 remoteRevoked = result.status === 204 || result.ok === true;

95 } catch {}

96 }

97 removeCustomerToken();

98 // Leave an explicit local tombstone so an Extension or CLI process cannot

99 // resurrect the previous SecretStorage/shared session after local logout.

100 revokeCustomerSession();

101 if (remoteRevoked) console.log("Remote customer session revoked; local credentials removed.");

102 else console.log("Remote logout unavailable; local credentials removed. Sign in again to revoke the server session.");

103 return remoteRevoked;

104}

105

106function addCustomerLogin(command, description) {

107 const login = command.command("customer-login").description(description).argument("[email]", "Customer email").option("--email-env <name>", "Read customer email from an environment variable").option("--password-env <name>", "Read customer password from an environment variable").option(

108 login.action(async (email, options) => { const resolvedEmail = email || (options.emailEnv && process.env[options.emailEnv]); if (!options.passwordEnv && !process.stdin.isTTY) { console.error("Customer password is required via --password-env in non-interactive mode."); process.exit

109 command.command("customer-logout").description("Revoke the server session and remove local customer credentials").option("--server <url>", "minitok server URL").action(async options => { await customerLogout(options.server); });

110}

111

112function register(program) {

113 const authCmd = program.command("auth").description("Manage provider and customer authentication");

114 authCmd.command("login").description("Log in to an LLM provider (OAuth or API key)").argument("<provider>", "Provider name (anthropic, openai, google; aliases claude, gpt, gemini accepted)").action(async provider => { process.exit(await cmdAuthLogin(provider)); });

115 addCustomerLogin(authCmd, "Log in to the minitok customer account for billing commands");

116 authCmd.command("status").description("Show stored credentials and their validity").action(async () => { process.exit(await cmdAuthStatus()); });

117 authCmd.command("logout").description("Remove stored credentials for a provider").argument("<provider>", "Provider name").action(async provider => { process.exit(await cmdAuthLogout(provider)); });

118}

119

120module.exports = { cmdAuthLogin, cmdAuthCustomerLogin, cmdAuthStatus, cmdAuthLogout, register };

121

src/llm/provider.jsView file

Lines 1-25javascript

1"use strict";

2

3const FETCH_TIMEOUT_MS = 300000; // Allow slow reasoning providers up to five minutes

4const MAX_RESPONSE_BYTES = 2 * 1024 *

src/auth/oauth.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @flotic/minitok@1.4.0 matchedIdentity = npm:QGZsb3RpYy9taW5pdG9r:1.4.0 similarity = 0.728 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/auth/oauth.jsView on unpkg